Privacy Policy

1. Personal Data We Collect

We collect personal data only as necessary in connection with our legal services and website operation. The categories of data we may hold include:

• Identity data: full name, role or title, company name
• Contact data: email address, telephone number, postal address
• Matter data: details of the legal matter you enquire about or instruct us on, including vessel names, shipping documents, and commercial details necessary to advise you
• Technical data: IP address, browser type, pages visited, and session duration collected automatically when you use our website
• Communications data: records of correspondence by email, telephone, or post

Data is collected through our website enquiry form, direct correspondence, and in the course of providing legal services. We do not collect sensitive personal data as defined under the PDPA unless it is relevant to the legal matter and you have provided it voluntarily.

Legal basis: We process personal data on the basis of your consent (where given), performance of a contract or engagement, compliance with a legal obligation, and our legitimate interest in operating a professional legal practice.

Retention: Enquiry data is retained for 24 months from last contact. Data associated with a formal retainer is retained for seven years following conclusion of the matter, in accordance with the Limitation Act 1953 and professional obligations under the Legal Profession Act 1976.

2. How We Use Your Data

We use personal data for the following purposes:

• Responding to legal enquiries and providing advisory services
• Managing the retainer and conducting the legal matter you instruct us on
• Billing and fee management
• Correspondence with courts, tribunals, arbitration bodies, and opposing counsel as required by your matter
• Liaising with P&I clubs, underwriters, and correspondent solicitors on your behalf
• Complying with anti-money laundering obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA)
• Improving our website and services through aggregated, anonymised analytics data
• Sending relevant legal updates to existing clients where consent has been given

We do not use your personal data for automated decision-making or profiling.

3. Data Sharing

We share personal data only where necessary and with appropriate safeguards in place. Recipients may include:

• Courts, the Admiralty Marshal, and judicial bodies as required by proceedings
• Correspondent solicitors and arbitration counsel in other jurisdictions coordinating on your matter
• P&I clubs and marine insurers when acting as your legal representative
• Third-party service providers (secure email, document management, accounting) who process data solely on our instruction and under confidentiality obligations
• Regulatory bodies, including the Malaysian Bar Council, where required by our professional obligations

We do not sell, rent, or trade personal data to third parties for commercial purposes. Where data is transferred outside Malaysia, we ensure adequate protections are in place consistent with applicable law.

4. Data Protection Measures

We take the security of personal data seriously and implement appropriate technical and organisational measures, including:

• TLS encryption for all data transmitted via our website and email communications
• Access controls limiting data access to personnel who require it for their role
• Secure document management systems with audit logging
• Regular review of data held and deletion of data no longer required
• Staff awareness of data protection obligations

In the event of a personal data breach that is likely to affect your rights, we will notify you and, where required, the Personal Data Protection Commissioner, within a reasonable timeframe.

5. Cookies

Our website uses cookies to function properly and to understand how visitors use the site. We use essential cookies (required for the site to operate), analytics cookies (to understand traffic patterns on an anonymised basis), and preference cookies (to remember your consent choices). We do not use cookies to serve advertising.

You can manage your cookie preferences at any time through our Cookie Policy page, which includes functional controls to set your choices.

6. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent to the processing of your data at any time (this will not affect lawfulness of processing before withdrawal)
• Request that we cease processing your data for direct marketing purposes
• Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, please contact our data officer at [email protected]. We will respond within 21 days. Please note that certain data processing activities may be exempt from access and correction rights under the PDPA where they relate to ongoing legal proceedings or are subject to legal professional privilege.

7. Third-Party Links

Our website may contain links to external sites, including court portals, legal directories, and professional associations. We are not responsible for the privacy practices of any third-party website. We encourage you to review the privacy policy of any external site before submitting personal data to it.

8. Children's Privacy

Our legal services are directed to business entities, commercial operators, and individuals aged 18 and above. We do not knowingly collect personal data from persons under 18 years of age. If you believe a minor has submitted data through our website, please contact us so we can delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. When material changes are made, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services following a policy update constitutes acceptance of the revised terms.

10. Contact — Data Enquiries

For any questions about this Privacy Policy, to exercise your data rights, or to raise a concern about how we handle personal data, please contact: